Wechia_ICMP_Scan Intruder with my IP address

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am getting regular Welchia_ICMP_Scan attacks from my own computer that is
being picked up and blocked by by Symantec Internet Security firewall. It is
regular on time, every 2 seconds for 8 times, or every hour. It appears that
I have the Nachia worm, but on doing tests, shows negative? What is going
on? Can anyone help?
 
There are anti virus News Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

First determine the origin. Is is it eminating from the LAN or WAN side ?

Chances are it is eminating friom the WAN side and the FireWall is doing its job I equate
this to window shopping."
They try to look inside to see what you have but don't enter the door.

Dave





| I am getting regular Welchia_ICMP_Scan attacks from my own computer that is
| being picked up and blocked by by Symantec Internet Security firewall. It is
| regular on time, every 2 seconds for 8 times, or every hour. It appears that
| I have the Nachia worm, but on doing tests, shows negative? What is going
| on? Can anyone help?
 
I am still getting the message, not able to find the News Groups below. I
have seen other messages that suggest this is a false positive.

The address that my machine is trying to attack is a Yahoo IP address.

Any other suggestions?
 
unplug your machine until you figure it out.

Doug said:
I am still getting the message, not able to find the News Groups below. I
have seen other messages that suggest this is a false positive.

The address that my machine is trying to attack is a Yahoo IP address.

Any other suggestions?
Click to expand...
 
Back
Top